Re: host based IDS for ERP

 I suggest you OSSEC HIDS - http://www.ossec.net .
You could easily write decoder and rules for your ERP.


Regards,

Rodrigo Montoro (Sp0oKeR)

On 5 Feb 2008 07:41:12 -0000,  <[email protected]> wrote:
> I want recommendations for best possible HOST Based IDS for a ERP deployment(oracle e business).The IDS to be deployed on the db machines.
>
>
> Name of any products which are known to suite a ERP environment will be helpful.
>
>
> Any other pointers/best practices on deployment of HOST based IDS for ERP architecture will be helpful.
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
> to learn more.
> ------------------------------------------------------------------------
>
>



-- 
 ===============================
  Rodrigo Montoro (Sp0oKeR)
      Security Researcher
SnortCP / RHCE / LPIC-I / MCSO
 http://www.spookerlabs.com.br
===============================

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------